yekbet Privacy Policy

1. Information We Collect

yekbet collects personal information in several ways: directly from you when you register an account or contact support, automatically as you interact with the platform, and from third-party service providers involved in payment processing and identity verification. The categories of information collected are set out below.

Registration and Account Data

When you create a yekbet account, you provide us with the following information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (used for age verification to confirm you are 18 or older)
• Email address (used as your primary account identifier and for communications)
• Mobile phone number (used for OTP-based two-factor authentication)
• Preferred username and password (hashed and never stored in plain text)
• Residential address including district, division, and postal code (for Bangladesh KYC purposes)

Identity Verification (KYC) Data

Before processing your first withdrawal, yekbet requires documentary evidence of your identity. Documents you may be asked to submit include:

• National Identity Card (NID) — front and back scan or photograph
• Passport — biographical data page
• Birth certificate — where NID or passport is unavailable
• Proof of address — a recent utility bill, bank statement, or official correspondence dated within 90 days
• Payment method confirmation — a screenshot or statement showing your bKash, Nagad, or bank account number matching the one registered on your yekbet account

KYC documents are reviewed by authorised compliance staff only, stored in an encrypted document vault, and are never shared with third parties outside of legally mandated disclosure scenarios.

Financial Transaction Data

Each deposit and withdrawal on yekbet generates a transaction record that includes: the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction timestamp in Bangladesh Standard Time (BST, UTC+6), the transaction reference number, and the account balance before and after the transaction. This data is retained for financial audit and anti-money laundering (AML) compliance purposes.

Behavioural and Platform Usage Data

When you use the yekbet platform, our servers automatically record technical information including your IP address, browser type and version, device model and operating system, session start and end times, pages visited, games played, bet amounts, and game outcomes. This data is used to maintain platform security, improve the user experience, and detect irregular patterns that may indicate fraud or bonus abuse.

2. How We Use Your Data

yekbet processes personal data only for lawful, specified purposes. The table below summarises the primary purposes for which your data is used, along with the legal basis for each processing activity.

yekbet does not use your personal data to build advertising profiles, serve targeted advertisements on third-party platforms, or make automated decisions that produce significant legal effects on your account — except where automated fraud detection systems flag activity for human review.

Where yekbet sends promotional communications (such as bonus offers, seasonal promotions tied to BPL cricket, Eid, or Pohela Boishakh events), these are sent only to players who have opted in to receive marketing emails. You may withdraw consent at any time by contacting support at [email protected]. Withdrawing marketing consent does not affect your ability to use the yekbet platform.

3. Data Sharing and Disclosure

yekbet does not sell or rent your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

Payment Processing Partners

To process deposits and withdrawals, yekbet shares the minimum necessary transaction data with its payment processing partners. These include mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). Each of these partners maintains its own privacy and security standards. yekbet shares only the transaction reference, amount, and account identifier necessary to complete or verify the transaction — not your full personal profile.

Game Content Providers

Games hosted on the yekbet platform are supplied by third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you launch a game, a session token is exchanged with the relevant provider to authenticate your session. Game providers receive your yekbet session identifier and bet history for the current game session; they do not receive your full name, contact details, or financial account information.

Identity Verification Services

Where automated KYC verification tools are used, your submitted identity documents may be processed by a third-party identity verification service operating under a data processing agreement with yekbet. Such processors are contractually bound to process your data only for the stated KYC purpose and to maintain security standards consistent with those of yekbet.

Legal and Regulatory Disclosure

yekbet may disclose personal data to law enforcement agencies, financial intelligence units, or other government authorities where required to do so by applicable law, court order, or where yekbet reasonably believes that disclosure is necessary to prevent fraud, money laundering, or serious harm. Such disclosures are made only to the extent required by the applicable legal obligation.

Business Transfers

In the event that yekbet undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified via your registered email address prior to any such transfer, and the acquiring entity will be required to honour the privacy commitments set out in this policy or provide you with the opportunity to close your account.

4. Cookies and Tracking Technologies

yekbet uses cookies and similar technologies (such as local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and gather anonymised analytics on how the platform is used. A cookie is a small text file stored on your device by your web browser. yekbet does not use cookies to track your activity across other websites.

The cookies used by yekbet fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the yekbet platform to function. They maintain your authenticated session after login, remember your language and currency preferences, and enable secure navigation between pages. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Performance and Analytics Cookies: yekbet uses first-party analytics cookies to collect anonymised data about how players interact with the platform — such as which pages are visited most frequently, average session duration, and which game categories attract the most engagement. This data is used exclusively to improve the yekbet platform and is not shared with third-party analytics providers.
• Functional Cookies: These cookies remember optional preferences you have set, such as your preferred game lobby view, notification settings, and deposit amount defaults. Disabling functional cookies may reduce the convenience of using the platform but will not prevent access.

yekbet does not use third-party advertising cookies, retargeting pixels, social media tracking pixels, or any cross-site tracking technology. There are no Facebook Pixel, Google Ads, or similar tags on the yekbet platform.

You may control or delete cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies on a per-site basis. Note that blocking strictly necessary cookies will prevent you from logging into your yekbet account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

5. Data Security Measures

yekbet applies a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. The security measures in place include both technical controls and organisational procedures.

Technical Security Controls

• TLS 1.3 Encryption in Transit: All data exchanged between your browser or device and yekbet servers is encrypted using Transport Layer Security (TLS) version 1.3. This protects your login credentials, financial data, and personal information from interception during transmission.
• AES-256 Encryption at Rest: Personal data and KYC documents stored on yekbet servers are encrypted at rest using AES-256, the same standard used by financial institutions worldwide.
• Password Hashing: Account passwords are never stored in plain text. yekbet uses a modern cryptographic hashing algorithm (bcrypt with an appropriate work factor) to store password hashes. Even in the unlikely event of a data breach, your plain-text password would not be exposed.
• Two-Factor Authentication (2FA): yekbet supports OTP-based 2FA via SMS for account logins from unrecognised devices. Players are strongly encouraged to enable this feature in their account security settings.
• Access Controls: Internal access to player data is governed by role-based access controls. Staff members can access only the data required for their specific job function. Access logs are maintained and reviewed regularly.
• Intrusion Detection: yekbet operates automated intrusion detection and anomaly monitoring systems that flag and respond to suspicious access patterns in real time.

Organisational Security Measures

yekbet staff who handle personal data are bound by confidentiality obligations and receive regular training on data protection best practices. Security policies are reviewed periodically and updated in response to emerging threats. Third-party service providers who process data on behalf of yekbet are assessed for their security posture before onboarding and are contractually required to maintain appropriate technical and organisational security measures.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, yekbet will notify affected players via their registered email address without undue delay and will take immediate steps to contain and remediate the breach.

6. Data Retention Policy

yekbet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The retention periods applicable to the main categories of data are outlined below.

When the applicable retention period expires, yekbet securely deletes or anonymises the relevant data. Anonymised data — from which all identifying information has been permanently removed — may be retained indefinitely for statistical and platform improvement purposes. Such data cannot be used to identify any individual player.

Where a player requests account closure for responsible gaming reasons (self-exclusion), yekbet retains a record of the self-exclusion for the full duration of the exclusion period plus an additional 12 months, in order to prevent re-registration during the exclusion window.

7. Your Rights as a Data Subject

As a yekbet account holder, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the yekbet support team at [email protected] with the subject line "Data Rights Request". yekbet will respond to all data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that yekbet holds about you. Upon a verified request, yekbet will provide a structured summary of your account data, transaction history, KYC records, and communication logs in a readable format.
• Right to Rectification: If any personal data held by yekbet is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core account details (such as legal name or date of birth), documentary evidence may be required to prevent fraudulent alterations.
• Right to Erasure: You may request that yekbet delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. Note that erasure requests cannot override legal retention obligations — for example, financial transaction records required for AML compliance cannot be deleted before the applicable retention period expires.
• Right to Restriction of Processing: You may request that yekbet restrict the processing of your data in certain circumstances — for example, while a rectification request is being verified, or while an objection is being assessed.
• Right to Data Portability: For data you have provided directly to yekbet and that is processed on the basis of consent or contractual necessity, you may request a copy in a structured, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to the processing of your personal data where yekbet relies on legitimate interest as the legal basis. yekbet will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

yekbet will not charge a fee for handling data rights requests unless they are manifestly unfounded, excessive, or repetitive. In such exceptional cases, yekbet may charge a reasonable administrative fee or decline to act on the request, providing written reasons for doing so.

8. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way yekbet handles your personal data, please contact the yekbet Data Protection team using the details below. All privacy-related enquiries are handled by dedicated compliance staff and are kept confidential.

Email: [email protected]
Subject Line: Privacy Policy Enquiry or Data Rights Request
Response Time: Within 2 business days for general enquiries; within 30 calendar days for formal data rights requests.
Support Hours: 24 hours a day, 7 days a week (English language support).

If you are not satisfied with yekbet's response to a privacy concern, or if you believe that yekbet has not complied with its data protection obligations, you have the right to escalate your complaint. yekbet encourages players to contact support first so that the issue can be investigated and resolved directly. Formal dispute escalation processes are set out in the yekbet Terms & Conditions.

yekbet reviews and updates this Privacy Policy periodically to reflect changes in platform operations, applicable law, or data processing practices. When material changes are made, registered players will be notified via their registered email address. The effective date at the top of this document will be updated accordingly. We encourage you to review this policy from time to time to stay informed about how yekbet protects your data.

By continuing to use the yekbet platform after an updated Privacy Policy has been published, you acknowledge the revised terms. If you do not agree with any change to this policy, you should close your account and cease using the platform before the revised policy takes effect.